Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: UIBq1anU917B2vZdK+QcC/eexg1v/i1JZ5cXzZywfSk=
Subject key identifier: 8D:B2:A1:79:B3:E0:2D:98:B6:79:43:C9:58:5B:D0:9E:E7:5B:A2:10
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 0199FBEB4A9F1060BC737038C2F042E7F649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: 5vNrFrQXZ8WbNTswOT6M/YTy0k5xfrHFO+WQVFZYbPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4a:9f:10:60:bc:73:70:38:c2:f0:42:e7:f6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=8db2a179b3e02d98b67943c9585bd09ee75ba210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:c5:cc:14:a2:bc:a4:1d:70:8e:e4:86:99:
04:29:79:ee:3b:3f:18:7e:f7:2d:90:7a:d5:7e:d8:
c7:26:05:49:7c:9b:81:f9:d8:26:37:7d:f3:fd:5f:
c8:39:01:60:5d:3e:cc:c6:1e:0c:68:a0:53:7e:5b:
02:4b:af:61:ad:a1:cc:b0:78:22:02:9a:62:df:21:
fc:e6:06:9d:a3:1e:d6:1e:13:47:cc:a6:1e:a5:5f:
e9:a9:25:7a:73:d3:35:bb:39:21:12:32:2b:e8:da:
db:6d:c1:88:ff:3b:e2:3e:59:61:9f:e7:8e:51:36:
7b:a8:11:8d:6a:f1:97:c8:d9:44:d7:95:1c:24:9f:
7e:5b:71:f4:47:f8:89:b3:5a:37:b3:12:77:b4:83:
2a:8f:a1:16:31:22:b3:81:f9:57:48:63:d2:7c:1c:
36:02:5b:88:fd:3d:c5:e7:a7:c2:b0:87:6c:12:ce:
79:d8:e6:ed:0a:68:2e:7f:be:d4:6a:48:96:c1:8b:
79:e0:a3:8f:23:d6:c1:8d:94:59:8b:ca:d5:ad:f9:
96:26:32:1d:f1:11:0d:b8:a3:5d:79:56:9d:c5:e7:
38:6f:e9:bb:9a:0b:98:49:24:59:98:29:0e:0e:09:
e4:ae:a5:b3:c6:d8:d5:94:9a:32:cc:88:ce:a3:cf:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B2:A1:79:B3:E0:2D:98:B6:79:43:C9:58:5B:D0:9E:E7:5B:A2:10
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f4:ac:63:9b:6f:8f:57:4c:7d:e1:76:52:54:f2:a1:38:14:
25:ea:f7:3e:20:67:7d:fa:f4:bd:f1:52:88:da:75:3f:54:f7:
9e:9f:5a:bf:ca:d9:8f:f3:1e:4f:bc:05:c9:5b:9e:ae:73:ca:
c2:4e:18:de:67:13:6c:e1:ec:b6:e8:27:7d:b4:fe:21:40:82:
5f:dc:bc:1c:5b:8e:5d:fa:08:be:94:25:5e:83:4e:30:d5:fe:
62:2e:8c:54:c9:01:03:96:1a:4f:c0:73:c7:fa:d0:77:44:db:
fc:c0:f7:a5:1a:91:27:3c:0e:16:b0:33:48:08:ce:b2:14:19:
b1:5c:a5:7a:81:cf:a3:4d:d9:9c:b1:5e:28:3d:3e:17:e0:97:
22:66:ff:9a:34:a2:00:2e:4a:c1:6a:c2:37:b4:2b:38:e3:0e:
80:1e:a8:b5:24:dd:31:92:69:11:98:7c:0c:e9:6d:59:e0:37:
9c:a5:d0:af:a6:dd:a4:c7:d5:cb:f9:b4:9c:ea:a6:fe:f0:65:
ce:2e:e0:a6:f1:15:18:a8:02:bc:17:3f:05:f4:3e:3d:c2:d4:
7d:de:05:a7:3f:f6:43:79:a3:38:62:20:3d:f3:44:63:6d:c5:
63:49:a4:d6:c4:e1:f9:4d:63:5a:ed:62:5e:36:7a:e8:9f:7f:
19:13:9a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:17 2025 by rpki-client